(cherry picked from commit 1b970b37)

(cherry picked from commit d2ab500a)

(cherry picked from commit 218b37df)

(cherry picked from commit 81eeab65)

(cherry picked from commit 76eb058d)
(cherry picked from commit 749ef5cd)
(cherry picked from commit 04f9fd64)

We are forcing a change through the installer, which is where
the majority starts from.  We don't want to enforce a change
twice.

We can't really see if we installed or went through a factory
reset, so this is (was) the best of both worlds in conjunction
with the new installer feature.

While here, annotate that it is possible to leave it "empty".

This reverts commit 5eb2c986.

(cherry picked from commit 9cf6655b)

(cherry picked from commit 5cb149d7)

PR: https://github.com/opnsense/core/issues/1714
(cherry picked from commit 738f9983)

(cherry picked from commit 77401d6a)

(cherry picked from commit 286bbf65)

(cherry picked from commit f20f0c91)
(cherry picked from commit fa047498)

(cherry picked from commit cbc2292f)

This is a shell script to make recovery as recoverable as
possible, now with a clear license and the ability to apply
inline or reboot for a clean configuration cycle.

error: setsockopt(..., SO_RCVBUF, ...) failed: No buffer space available

In the longrun all macro entries should go, but for now a replace should be sufficient.

ipsec, cleanup non-functional nat before ipsec logic and ui for 17.7. In case the feature will reemerge at some point, it would be better to move it to the firewall section anyway. for reference about this long standing issue see https://github.com/opnsense/core/issues/440

This reverts commit c4628a0b.
It looks like pkg can't handle php70 to php71 at all.

filter, rule generation. don't wrap aliases in curly brackets, it seems to crash when a to port is written like {$portalias}